$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: 1WCBe3y1gQu2J+vTv4c2wKuUzNQUFRVQzYjVus9p2uk= Subject key identifier: 9B:7F:B8:EF:61:E3:C2:5C:4F:1D:22:0A:FB:3D:8E:E4:0D:14:54:D6 Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: 26 Signing time: Fri 17 May 2024 08:39:59 +0000 Manifest this update: Fri 17 May 2024 08:39:59 +0000 Manifest next update: Fri 24 May 2024 08:39:59 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: N9CdL6BqZrsccjDpjehbWTWTTsyhCeQbRZ9oEAkIprc=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: i2LHA/EgGtTBeHKNnFlyuCR2kaAk5AeCjXfpxJn/gu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: May 17 08:39:59 2024 GMT Not After : May 24 08:39:59 2024 GMT Subject: CN=664717df-fc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:75:db:fe:9e:f4:6b:93:31:20:09:92:3b: 81:73:b2:4b:1b:d7:a9:c0:b7:d5:8e:0f:dc:c3:94: 62:b2:97:fa:9d:0f:8e:05:af:34:0b:78:ce:af:70: f1:43:c5:82:9e:29:21:72:e7:ae:76:d7:d0:4a:9c: 22:42:27:be:5c:ee:6d:83:c9:5d:ae:9e:cd:49:71: e9:a5:ec:64:0b:19:70:e0:77:e6:03:2c:4e:d4:5d: 64:ed:cf:e5:48:98:d5:83:12:29:43:97:b3:fd:af: 49:89:28:33:32:40:61:33:aa:4c:b3:55:a5:22:20: 21:d4:d9:35:06:e9:fd:d2:d1:f8:95:7c:6f:00:92: 42:1f:f0:4d:cb:07:c1:7f:e1:c4:7d:c7:02:38:bf: ac:3b:d8:6a:f0:92:7f:5c:a1:e4:c7:89:60:67:c5: 9a:77:fd:49:56:b0:ec:a6:93:5d:55:c2:c0:7e:fd: 53:40:14:e5:14:ef:44:50:bd:b4:d1:74:46:a1:fb: 2f:7b:f3:72:af:51:79:a4:b4:30:72:84:a4:d5:63: ca:81:65:e2:63:02:1e:db:d8:ed:05:ca:94:fd:31: 3b:49:f1:6f:59:e4:14:29:05:40:28:b1:c1:b0:50: c1:bd:ec:af:ed:cf:ec:3a:72:e6:ac:50:60:63:35: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7F:B8:EF:61:E3:C2:5C:4F:1D:22:0A:FB:3D:8E:E4:0D:14:54:D6 X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4a:7a:21:be:d8:ac:ca:ad:cf:62:e6:2f:04:44:47:46:12: fd:dc:53:4d:36:0e:32:33:c3:3d:47:5a:9e:e8:27:02:f1:66: c0:46:67:73:22:fb:96:e3:dc:6d:75:78:be:13:91:f9:f0:a6: 15:cb:e4:c6:ba:57:b1:32:3f:4c:4f:b3:ea:b7:dd:e6:8b:ca: 56:db:d6:03:2c:1a:a3:f8:55:f0:d8:2c:d5:f0:48:27:9e:17: df:9a:e6:8a:d6:f3:64:b5:ae:04:4e:a3:f5:c4:93:4f:88:a5: c4:23:c4:13:65:95:c1:08:7b:55:7a:7b:f9:ba:c7:8d:67:83: 71:4a:41:f0:32:52:4c:4b:44:76:d3:3a:0c:b0:87:6b:68:2f: 61:b2:e6:4c:75:3e:b5:5a:7f:bf:79:87:7f:99:a9:ab:64:a4: ee:37:ac:c8:9f:b7:44:9a:42:99:4b:c3:cf:61:00:ef:26:dc: cd:46:4f:7b:62:61:63:db:94:e8:b0:3b:7e:8c:a8:4e:89:1a: 42:fa:92:da:fa:f2:22:32:c8:1b:28:0a:35:eb:90:8f:e2:ee: 69:b2:19:77:3b:f0:8e:da:00:ca:b0:c4:a2:d3:9d:b9:30:f5: e3:64:cc:24:9f:59:fe:96:b1:6e:1e:33:51:dd:92:9e:38:a6: 60:f3:1b:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0E3MjExMC8GA1UEBRMoOTBBNDdGM0M2NTlCMzcxOEZEQzgyRDMwMDdBOUQzNDI0 OUNDQzhGNDAeFw0yNDA1MTcwODM5NTlaFw0yNDA1MjQwODM5NTlaMBgxFjAUBgNV BAMTDTY2NDcxN2RmLWZjN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2T3Xb/p70a5MxIAmSO4Fzsksb16nAt9WOD9zDlGKyl/qdD44FrzQLeM6vcPFD xYKeKSFy565219BKnCJCJ75c7m2DyV2uns1Jceml7GQLGXDgd+YDLE7UXWTtz+VI mNWDEilDl7P9r0mJKDMyQGEzqkyzVaUiICHU2TUG6f3S0fiVfG8AkkIf8E3LB8F/ 4cR9xwI4v6w72Grwkn9coeTHiWBnxZp3/UlWsOymk11VwsB+/VNAFOUU70RQvbTR dEah+y9783KvUXmktDByhKTVY8qBZeJjAh7b2O0FypT9MTtJ8W9Z5BQpBUAoscGw UMG97K/tz+w6cuasUGBjNVx/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm3+472Hj wlxPHSIK+z2O5A0UVNYwHwYDVR0jBBgwFoAUkKR/PGWbNxj9yC0wB6nTQknMyPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3QTcyLzIyRkQxMjFBRENG MDExRUVCQzkwMzExRUM0RjlBRTAyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0tSX1BHV2JOeGo5eUMwd0I2blRRa25NeVBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 QTcyLzIyRkQxMjFBRENGMDExRUVCQzkwMzExRUM0RjlBRTAyL2tLUl9QR1diTnhq OXlDMHdCNm5UUWtuTXlQUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVKeiG+2KzKrc9i5i8EREdGEv3cU002DjIzwz1HWp7oJwLxZsBGZ3Mi +5bj3G11eL4TkfnwphXL5Ma6V7EyP0xPs+q33eaLylbb1gMsGqP4VfDYLNXwSCee F9+a5orW82S1rgROo/XEk0+IpcQjxBNllcEIe1V6e/m6x41ng3FKQfAyUkxLRHbT Ogywh2toL2Gy5kx1PrVaf795h3+ZqatkpO43rMift0SaQplLw89hAO8m3M1GT3ti YWPblOiwO36MqE6JGkL6ktr68iIyyBsoCjXrkI/i7mmyGXc78I7aAMqwxKLTnbkw 9eNkzCSfWf6WsW4eM1Hdkp44pmDzG5g= -----END CERTIFICATE-----Generated at Fri May 17 10:59:11 2024 by rpki-client on console-ams.rpki-client.org